Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: mLc9uhKpe56PtOF8F7BbRxLICiXG6rSOtqDWsh2UdWo=
Subject key identifier: DF:C4:6A:37:AD:FB:82:27:D5:BE:87:FE:0D:46:DB:04:3E:3D:99:ED
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 019D38D37CABF7FC62CA8A2AF07A70D12353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 049D
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: b0aDaZxs3oC08puDeaG7MfBiNz5W1ugpFpBK8h/XWqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7c:ab:f7:fc:62:ca:8a:2a:f0:7a:70:d1:23:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=dfc46a37adfb8227d5be87fe0d46db043e3d99ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f7:f3:6c:59:a6:b5:63:e2:7c:f9:f9:57:39:
de:d6:f5:93:3d:d7:29:b7:2e:df:23:ca:fe:c3:94:
b2:5a:24:de:ae:41:2f:b5:64:02:be:d3:d6:85:da:
da:35:42:3a:06:00:31:af:f4:27:1b:1d:b6:fd:21:
58:53:41:41:11:37:e7:15:da:16:be:ba:0f:f8:ee:
ae:a5:1c:e5:e2:9c:9b:91:25:c3:c5:5f:aa:38:26:
a4:f6:51:ac:40:38:73:de:31:a7:24:2b:ad:92:01:
aa:f2:5b:b5:bf:b9:6d:89:f3:31:35:1d:68:ec:6f:
fa:f9:fa:df:e9:93:f3:d4:75:25:79:42:36:69:1b:
59:d0:c7:c5:0d:46:21:45:9a:72:13:df:99:02:ae:
8d:a1:3c:6a:d3:54:b8:35:83:f9:a4:ef:1f:58:c1:
c5:81:ec:11:54:9e:70:a5:d6:fc:a8:22:98:2b:4a:
c2:3d:4a:d6:a3:a4:b1:a4:80:44:3a:92:56:ca:72:
85:9e:b6:09:7f:c7:7f:4f:00:be:cc:a0:b1:4a:de:
75:8f:6f:48:c4:1b:63:1c:03:77:fd:12:13:2c:1b:
ae:1d:2e:94:60:54:52:fb:03:30:e7:da:2b:09:ac:
1a:5d:9e:5e:8d:aa:64:38:36:56:0e:bd:5c:c1:a7:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:6A:37:AD:FB:82:27:D5:BE:87:FE:0D:46:DB:04:3E:3D:99:ED
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:26:24:2c:6a:2a:02:c9:96:50:8b:45:e9:58:8c:61:cb:80:
46:85:f3:73:b7:6a:9b:ef:b4:24:8d:a4:2b:af:0a:8b:32:ea:
bc:fd:a7:59:d6:34:2f:19:37:8e:0d:23:8d:6a:a6:40:8b:f9:
83:40:35:6b:4b:cd:98:f1:b6:b2:05:67:a5:ab:d7:3c:a7:56:
5b:0e:37:f0:4b:9a:8a:fb:6c:07:c8:7c:e4:a1:6e:9e:d7:b9:
8a:14:82:db:5a:72:c7:4d:c8:e6:96:41:07:89:fe:99:b4:44:
bd:e0:54:a6:82:67:66:81:06:6e:9b:55:6d:5d:8a:b8:23:a6:
44:5b:9e:a2:88:b6:19:51:70:79:19:84:66:12:28:e1:b4:4e:
3a:d6:b8:5f:da:9e:5f:0b:a3:0d:db:ca:6c:85:65:2c:4f:14:
d7:7f:af:f0:13:84:c2:90:2a:86:d5:fb:04:13:06:6e:cc:cc:
f1:2e:81:cb:5f:9a:b9:72:4a:21:86:1d:7b:78:c0:d2:1c:78:
cc:fe:5d:51:08:ae:38:ef:50:b3:27:68:7c:2b:a9:50:a5:c2:
b3:25:f5:c5:1b:d0:f5:0b:46:7a:84:a9:42:87:1d:fa:a6:48:
8c:cc:a6:b3:87:b2:5d:cb:b4:52:e3:47:99:bc:6f:27:6d:f3:
7c:bd:aa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:09 2026 by rpki-client